Flaw in Cisco Meeting Server Allows Hackers to Impersonate Legitimate Users
A critical vulnerability in one of Cisco’s enterprise video conferencing products allows remote attackers to impersonate legitimate users, the networking giant warned on Wednesday.
read more
False Flags and Mis-Direction in Hacker Attribution
read more
Continue readingAnother Potential Victim of the Yahoo! Breach: Federated Login
Password proliferation is bad, for many, many, many reasons. But the worst reason is that people tend to re-use passwords all over the place.
read more
Attackers Use Decade-Old Flaw to Target IoT Devices
Cybercriminals have been exploiting an old SSH vulnerability and insecure configurations to abuse Internet of Things (IoT) devices for attacks aimed at Web services and internal networks.
read more
Zeus Banking Trojan Distributed via MSG Attachments
A recently spotted spam campaign was using Message (.MSG) file attachments to infect users with the infamous Zbot banking Trojan, Trustwave security researchers say.
read more
A Spell Check Equivalent for Building Security In
I can honestly say that spell check is the reason I now know how to spell “separate.” It only took about 20 years of patient and faithful repetition from Microsoft Word.
read more
Attackers Actively Exploit Recently Patched BIND Flaw
A high severity denial-of-service (DoS) vulnerability patched last month in the popular DNS software BIND has been exploited in the wild to crash systems.
read more
Facebook Paid Out $5 Million in Bug Bounties Since 2011
Five years after the launch of its bug bounty program, Facebook says it has paid out a total of more than $5 million to the researchers who have helped the company find and patch vulnerabilities in its systems and products.
read more
Attackers Use Internet Explorer Zero-Day to Avoid Researchers
One of the Internet Explorer zero-days patched by Microsoft on Tuesday has been exploited in malvertising campaigns to help attackers avoid automated analysis systems and researchers.
read more
Cerber 4.0 Fuels New Wave of Ransomware Attacks
The latest variant of the notorious Cerber ransomware family is currently featured in several infection campaigns, security researchers warn.
read more
